Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/1ce33f06-30a4-32ed-8f59-596eecccf046.roa
File:                     1ce33f06-30a4-32ed-8f59-596eecccf046.roa (raw, json)
Hash identifier:          znBYya2qm4TCby/tGcqSj8+noayRd25RM3Fl8XzXby4=
Subject key identifier:   FB:8C:59:2D:49:40:7B:8F:53:C6:23:B1:F8:80:71:0F:51:5C:11:25
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584EBC770ADDBB45585039FB3E00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/1ce33f06-30a4-32ed-8f59-596eecccf046.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     174
IP address blocks:        74.91.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:0a:dd:bb:45:58:50:39:fb:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=4551d0ae-c78d-476b-844b-8467badf8fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0d:c2:89:cd:26:88:f2:2d:eb:74:47:04:58:
                    1a:88:58:91:2e:4c:67:55:09:b2:2e:2d:d8:44:b6:
                    ac:82:6b:a7:df:64:31:18:28:8c:04:96:1f:1e:d0:
                    8a:e5:b2:f6:e5:fa:16:2b:61:30:37:b1:8b:fc:db:
                    b6:09:a8:11:f4:6e:f4:ad:3d:3f:a1:7c:e8:89:60:
                    a3:cd:e3:3d:ac:fd:f4:b0:67:fa:d8:38:9e:b9:02:
                    94:ca:b3:d6:da:c5:87:03:fe:0b:e6:2a:2a:a8:55:
                    ca:69:87:00:09:16:5c:9c:91:7d:d9:87:cb:be:90:
                    03:c6:71:3c:66:20:5c:e6:e0:9c:f5:80:ce:28:f6:
                    ce:aa:bd:13:28:87:d2:ce:ca:0b:98:1f:9e:e8:9e:
                    7e:69:da:ff:08:dd:f1:64:43:8e:5d:a3:89:7b:e3:
                    34:ed:d5:fe:4d:c8:90:5c:e7:68:c6:1e:45:86:57:
                    18:32:1a:73:6a:e4:dd:92:e0:13:4e:46:23:ba:00:
                    ca:63:2c:01:95:43:99:0c:45:7c:1f:87:9a:82:08:
                    f1:bb:17:46:56:62:6f:6e:c1:f7:bf:43:a9:af:e6:
                    11:c3:7c:77:92:63:14:7f:48:4e:58:9d:4f:04:31:
                    32:de:64:fb:5b:9e:78:66:1d:dc:c3:80:6d:aa:e9:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8C:59:2D:49:40:7B:8F:53:C6:23:B1:F8:80:71:0F:51:5C:11:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/1ce33f06-30a4-32ed-8f59-596eecccf046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:94:03:cc:bf:38:13:65:d2:62:cc:ff:ad:90:ba:fd:db:4e:
         c5:a5:84:ea:0d:8e:94:d4:68:f0:dd:93:b5:bb:e1:84:ec:ca:
         c9:32:4a:89:f7:01:d3:b8:34:80:ef:3a:aa:f9:c8:fd:38:e6:
         78:fe:1d:c0:ed:ec:5a:55:a9:25:da:1b:82:93:cb:d1:d8:cc:
         7b:bf:17:3d:62:67:e6:87:51:ce:e4:06:ce:72:98:36:93:b9:
         ff:d4:c9:82:b8:fb:43:dc:1b:8d:79:9a:5c:ef:7f:1e:0b:9c:
         bf:f0:89:e1:53:da:d8:89:f7:87:0c:51:f1:97:71:11:c6:5d:
         ee:fa:5d:b9:84:d2:7a:98:a2:7d:1f:55:75:a7:29:71:de:9e:
         a4:22:f6:94:6c:ab:99:fe:74:dc:b2:1f:ad:79:28:47:4d:fe:
         19:d3:45:37:95:1c:12:a5:64:4d:76:31:83:5d:04:58:12:c1:
         b1:81:f3:2e:28:d4:ba:c9:bf:45:cf:7f:8b:d3:15:52:4c:1c:
         ee:8c:41:d9:75:33:dd:4a:96:db:aa:32:da:c7:89:73:fb:7a:
         bb:cc:da:f1:f7:f3:77:1b:db:80:6a:a4:85:2d:db:cd:58:d5:
         eb:7a:67:ef:0f:ca:89:0a:d8:05:d6:3e:54:c2:c3:14:97:a9:
         a8:d1:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:06 2026 by rpki-client